Fix for macOS: tar: Option --to-command=... is not supported

.github/workflows/test.yml

@@ -8,14 +8,18 @@ env:
 jobs:
   tests:
     name: "Tests"
-    runs-on: ubuntu-latest
+    runs-on: ${{ matrix.os }}
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [macos-latest, ubuntu-latest]
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           persist-credentials: false
       - uses: actions/setup-python@0b93645e9fea7318ecaed2b359559ac225c90a2b # v5.3.0
         with:
-          python-version: 3.x
+          python-version: 3.12
           cache: pip
           cache-dependency-path: dev-requirements.txt
       - run: |

run_release.py

@@ -18,6 +18,7 @@
 import shutil
 import subprocess
 import sys
+import tempfile
 import time
 import urllib.request
 from pathlib import Path
@@ -570,17 +571,14 @@ def check_doc_unreleased_version(db: ReleaseShelf) -> None:
     if release_tag.includes_docs:
         assert archive_path.exists()
     if archive_path.exists():
-        proc = subprocess.run(
-            [
-                "tar",
-                "-xjf",
-                archive_path,
-                '--to-command=! grep -Hn --label="$TAR_FILENAME" "[(]unreleased[)]"',
-            ],
-        )
-        if proc.returncode != 0:
-            if not ask_question("Are these `(unreleased)` strings in built docs OK?"):
-                raise AssertionError("`(unreleased)` strings found in docs")
+        with tempfile.TemporaryDirectory() as temp_dir:
+            subprocess.run(["tar", "-xjf", archive_path, "-C", temp_dir])
+            proc = subprocess.run(["grep", "-rHn", "[(]unreleased[)]", temp_dir])
+            if proc.returncode == 0:
+                if not ask_question(
+                    "Are these `(unreleased)` strings in built docs OK?"
+                ):
+                    raise AssertionError("`(unreleased)` strings found in docs")
 
 
 def sign_source_artifacts(db: ReleaseShelf) -> None: